keamanan pada-switch

1. TK3183-Teknologi Switching LAN
Keamanan pada Switch
Prajna Deshanta Ibnugraha, ST. MT. CCENT. CCNA
Email : prj@politekniktelkom.ac.id
Hanya dipergunakan untuk kepentingan pengajaran di lingkungan politeknik
Telkom
Tahun Ajaran 2013/2014
Semester Gasal

2. Switch Security Attack
 MAC Address Flooding
 Spoofing Attack
 CDP Attack
 Telnet Attack : Brute Force, DoS Attack

3. Spoofing Attack

4. CDP Attack

5. Security Check
 Network Security Audit
 Network Penetration Testing

6. Metode Pengamanan Switch
 Fitur keamanan Switch Manageable yang dapat
dimanfaatkan adalah
Port Security

7. Chase Topology

8. Chase 1
 Konfigurasi :
Switch(config)# interface fastethernet 0/2
Switch(config-if)# switchport mode access
Switch(config-if)# switchport port-security
Switch(config-if)# switchport port-security mac-
address [mac-PC]
 Gantilah PC yang memiliki MAC address yang
berbeda
 Analisa hasilnya : kesimpulan???

9. Chase 2
 Konfigurasi :
Switch(config)# interface fastethernet 0/2
Switch(config-if)# switchport mode access
Switch(config-if)# switchport port-security
Switch(config-if)# switchport port-security maximum 2
Switch(config-if)# switchport port-security mac-
address sticky
Switch(config-if)# end
 Gantilah PC yang memiliki MAC address berbeda-beda
sebanyak 3 kali
 Analisa hasilnya

10. Chase 3
 Konfigurasi :
Switch(config)# interface fastethernet 0/2
Switch(config-if)# switchport mode access
Switch(config-if)# switchport port-security
Switch(config-if)# switchport port-security mac-
address [mac-PC]
Switch(config-if)# switchport port-security
violation restrict
 Gantilah PC yang memiliki MAC address yang
berbeda
 Analisa hasilnya : kesimpulan???

11. Chase 4
 Konfigurasi :
Switch(config)# interface fastethernet 0/2
Switch(config-if)# switchport mode access
Switch(config-if)# switchport port-security
Switch(config-if)# switchport port-security maximum 2
Switch(config-if)# switchport port-security mac-
address sticky
Switch(config-if)# switchport port-security violation
restrict
 Gantilah PC yang memiliki MAC address berbeda-beda
sebanyak 3 kali
 Analisa hasilnya

12. Daftar Pustaka
 CCNA Exploration versi 4. CCNA Exploration: LAN
Switching and Wireless. Cisco
 Lammle, Todd. (2011). CCNA Cisco Certified
Network Associate Study Guide, 7th Edition. SYBEX.
 Odom, Wendell. (2011). CCNA 640-802 Official Cert
Library, Updated (3rd Edition). Cisco Press